Overview
overview
10Static
static
1猪八戒�...cx.lnk
windows7-x64
10猪八戒�...cx.lnk
windows10-2004-x64
10猪八戒�...33.vbs
windows7-x64
10猪八戒�...33.vbs
windows10-2004-x64
10猪八戒�...es.dll
windows7-x64
3猪八戒�...es.dll
windows10-2004-x64
3猪八戒�.../pp.py
windows7-x64
3猪八戒�.../pp.py
windows10-2004-x64
3猪八戒�...on.exe
windows7-x64
1猪八戒�...on.exe
windows10-2004-x64
1猪八戒�...37.dll
windows7-x64
3猪八戒�...37.dll
windows10-2004-x64
3猪八戒�...�.docx
windows7-x64
4猪八戒�...�.docx
windows10-2004-x64
1Analysis
-
max time kernel
142s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16-08-2023 07:52
Static task
static1
Behavioral task
behavioral1
Sample
猪八戒股份有限公司-需求/猪八戒股份有限公司-需求.docx.lnk
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
猪八戒股份有限公司-需求/猪八戒股份有限公司-需求.docx.lnk
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/333.vbs
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/333.vbs
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/_ctypes.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/_ctypes.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/pp.py
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/pp.py
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python.exe
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python37.dll
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/python37.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/猪八戒股份有限公司需求.docx
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
猪八戒股份有限公司-需求/营业执照/.__MACOS__/猪八戒股份有限公司需求.docx
Resource
win10v2004-20230703-en
General
-
Target
猪八戒股份有限公司-需求/营业执照/.__MACOS__/.__MACOS__/._MACOS_/_ctypes.dll
-
Size
130KB
-
MD5
9e18aca18e4ece1c187f8c0cd12a5c8f
-
SHA1
a8ba36a9eea969d722a9ae90139d4d59f643f951
-
SHA256
3351627469ea8965b08bafc9de18d1d890479357df6bc8917f7218535e02f211
-
SHA512
237b0ef23d0a91014581b94f5c7696da1ab3c1c3a51f6ffe10787c65dc4f5a90d1760e4088afc9acc27bae7f159a32fa3e7a9b15daba5950751932683e9373b3
-
SSDEEP
3072:hFHggvfQuiAnxL3RIF5Hfbr/IHWfxI1VPm:sgvZnxhw5HfbroKX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4476 3228 WerFault.exe 67
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\猪八戒股份有限公司-需求\营业执照\.__MACOS__\.__MACOS__\._MACOS_\_ctypes.dll,#11⤵PID:3228
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3228 -s 3962⤵
- Program crash
PID:4476
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 3228 -ip 32281⤵PID:3364